Microsoft Defender for Business
Endpoint protection

Reports in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn

In brief

The page now uses formatted links and more concise, consistent wording throughout its report descriptions and instructions.

What Defender admins need to know

Administrators can follow the report guidance more easily. No action is indicated.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Reports in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn

Several reports are available in the Microsoft Defender portal (Microsoft Defender portal). These reports enable your security team to view information about detected threats, device status, and more.

This article describes these reports, how you can use them, and how to find them.

Screenshot of monthly security summary report currently in preview.

The monthly security summary report (currentlyreport, currently in preview)preview, shows:

  • Threats detected and prevented by Defender for Business, so you can see how the service is working for you.
  • Your current status from Microsoft Secure Score, which gives you an indication of your organization's security posture.

Tip

You can view similar information on the home page of your Microsoft Defender portal (Microsoft Defender portal).

Threat protection report

Screenshot of the device health report in Defender for Business.

The device health report provides information about device health and trends. You can useUse this report to determine whether Defender for Business sensors are working correctly on devices and the current status of Microsoft Defender Antivirus.

To access this report, in the navigation pane, choose Reports > Endpoints > Device health.

Screenshot of the device inventory report in Defender for Business.

You can useUse the Devices list to view information about your company's devices. To learn more,For more information, see Manage devices in Defender for Business.

To access this report, in the navigation pane, go to Assets > Devices.

Note

If you didn't configure web protection for your company, choose the Settings button in a report view. Then, under Rules, choose Web content filtering. To learnFor more about web content filtering,information, see Web content filtering.

Firewall report

Note

If your firewall report has no data, it might be because you didn't configure firewall protection yet. In the navigation pane, choose Endpoints > Configuration management > Device configuration. To learn more,For more information, see Firewall in Defender for Business.

Device control report

  • Configuration: Filter on standard protection rules or other attack surface reduction rules.
  • Add exclusions: Define exclusions, if needed.

To learn more,For more information, see Attack surface reduction (ASR) rules report in the Microsoft Defender portal.

To access this report, in the navigation pane, choose Reports > Endpoints > Attack surface reduction rules. \ No newline at end of file